Thrive Visual Editor Vulnerabilities

The Thrive Visual Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 10.9.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a use...

CVSS:

7.2

Affected:

up to 10.9.3.1

Fixed in:

10.9.3.2

Disclosed:

Aug 4, 2026

CVE-2026-66694 on NVD →

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive A...

CVSS:

5.3

Affected:

up to 2.6.7.4

Fixed in:

2.6.7.4

Disclosed:

Apr 23, 2021

CVE-2021-24219 on NVD →